Microsoft Active Directory Management

This page describes services for Active Directory management:

Name Probability Target % of tasks TU Version
Monitoring 1 100
Monitoring DNS service includes 1 100
Verifying zone transfers 1 100
Verifying dynamic DNS record updates 1 100
Testing a query on the DNS server 1 100
Collecting DNS server statistics 1 100
Monitoring WINS service includes
Monitoring WINS replication 1 100
Collecting WINS server statistics 1 100
Monitoring DHCP service includes
Monitoring Scopes and Super scopes Free Addresses 1 100
Collecting DHCP server statistics 1 100
Reconciling DHCP database 1 100
Operating 1 100
User management: 1 100
Administration of users and groups; including membership of the groups 1 100
Administration of users security policy settings; including Account Password and Lockout settings, User Right Assignments, and Security Options in environments where Group Policies are not enforced 1 100
Computer Object management includes:
Creating pre-staged Computer objects 1 100
Resetting Computer objects 1 100
Directory services management includes:
Infrastructure management that includes subnets management, Global Catalogue changes 1 100
Creating new OUs 1 100
Directory services Backup and Restore 1 100
Engineering 0,720833333 46,03645833
Group Policy management 0,8 58
Designing and testing new Group Policy Objects 0 0
Creating new Group Policy Objects 1 50
Linking Group Policy Objects 1 40
Manage enforced policy settings 1 100
Changing existing Group Policy Objects 1 100
Directory services management 0,6 41,66666667
Security impact Infrastructure management that provides FSMO roles change, schema updates, DFS root tasks, Kerberos changes 0,6 40
Planning and implementing site and site link changes 0,6 50
Planning and implementing replication parameters 0,6 40
Planning and implementing domain and forest trusts 0,6 40
Planning and implementing new Domain Controller installation 0,6 30
Planning and implementing OU structure changes 0,6 50
Directory services security management 0,6 50
Planning and implementing Active Directory audit strategy 0,6 50
Planning and implementing Active Directory security permissions model 0,6 50
Active Directory Networking Service 0,883333333 34,47916667
In a Wintel environment, this functionality is typically provided by the following Windows Server Roles: 0,7 40
Domain Name System (DNS) 0,7 40
Windows Internet Name Service (WINS) 0,7 40
Dynamic Host Control Protocol (DHCP) 0,7 40
DNS management 1 21,25
Creating a new Active Directory–integrated zones 1 30
Deleting an Active Directory–integrated zones 1 20
Managing Active Directory–integrated zone parameters 1 20
Managing the Root Hints (stored in Active Directory) 1 20
Managing DNS zone forwards 1 20
Managing DNS security 1 20
Managing DNS zone settings 1 20
Managing DNS records 1 20
DHCP management 1 40
Managing Scopes 1 40
Managing Reservation 1 50
Managing DHCP options 1 30
WINS management 0,833333333 36,66666667
Managing WINS replication partners 1 30
Managing WINS records, 1 30
Providing WINS settings to DNS and DHCP services 0,5 50

Leave a comment